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[57] ABSTRACT 

In order to hide an authentication code or signature (101, 
402, 504) in an electric signal (100, 400, 401), which 
consists of data parts with a certain value, certain data parts 
are selected from the electric signal for processing on the 
basis of the contents of the authentication code. The value of 
each data part selected for processing is re-determined by a 
filter (200, 403, 504), which uses certain other predeter- 
mined data parts of the electric signal as input data. For 
detecting the authentication coding, the signal is filtered 
with the same filter (403) and those data parts (406) which 
have their value unchanged after the second filtering are 
marked. The electric signal can be a file (particularly an 
image file) or a temporally continuous signal. The device for 
implementing the method comprises a memory (501, 502) 
for saving the electric signal and a processing unit (500) for 
reading the data from the memory and for changing the 
value of its data parts. The device also comprises a filter 
(503), which uses the other data parts of the signal as input 
data and which determines the new value of the data parts 
selected for processing. The device can interact with the user 
(506, 507) or it can be a sealed authentication coding circuit. 

14 Claims, 3 Drawing Sheets 
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HIDING A AUTHENTICATION CODE IN AN the authentication code must endure attempts to pirate the 

ELECTRIC SIGNAL images or to cover the real origin of the image. 

In watermark methods, the graphic element used as a 

TECHNICAL FIELD authentication code is generally called a watermark or 

. . , . i. . r 5 signature. One known, watermark-type method has been 

Tins invention relates to adding a code indicative of ted in me pub ii cation R . q van Schyndel, A. Z. 

ownership or other authentication code to an electric, Tirkel C F 

(electronic) signal so as to make it difficult for outsiders to 0sb ' orQe A Di Ual WatermarK Proceeding5 0 fICIP-94, 

perceive the existence of the code and/or remove the code Volume „ of ffl /£££j Austin> Tex<) 1994 . For 

from the signal. The invention relates to both the method and ]Q Qther blicatioDS deali with rior art methods for aulhen . 

a device for implementing the method. In this patent lication codil]g of images , please see the reference list at the 

application the signal used as an example is a two- end of ^ descri Uve ^ of this application . Generally in 

dimensional image presented in electric form, particularly a ^ ^ ^ 51icationSj the si ature fa converted t0 a 

still image _ produced by a photographic apparatus. However, vinuall random f ^ ixe , s of which are Qn 

the invention can ato be generalized to other signal types, J5 mc ^ tQ be authenlicatioQ M . A disadvantage of 

as will be described in more detail hereinafter. tfaese methods ^ ^ &c , ^ {h& calculalion melhod g^ry 

BACKGROUND OF THE INVENTION complicated. 

It is usually rather easy to copy and duplicate electrically SUMMARY OF THE INVENTION 

presented information, which makes it more difficult to 20 jh e object of this invention is to present a method and a 

control that copyrights are observed. According to interna- device by which the above described objectives of the 

tional agreements, copyright to a certain image belongs to authentication coding of signals can be achieved easily and 

the producer, (author) of the image. If the producer saves the reliably. 

image in the form of an electric file in a computer, which is ^ o5jects of the invention are acnie ved by attaching the 

connected to a wide information network, such as, the 25 s i gnat ure to the original signal by a filtering method, which 

Internet, it is possible that another user of the network copies ch the value of the pixds or other signal parts indicated 

the image file and uses it m other contexts without paying 5y the signature in a controlled manner, 

compensation to the producer, who is entitled to it on the ™ ... t . . - .... 

u * r .u • iA ic j . . . The method according to the invention for hiding an 

basis of the copyright. If the producer wants to present a .»..*.• a • i . • ■ i ■ u . • -i * 

, i , • r 5 . * 1 1 i . ™ authentication code in an electric signal is characterized in 

legal claim for compensation, he must be able to prove that 30 . r ° . 

& . i i u ■ r *u • i • that the value of each data part selected from the signal for 

the image used elsewhere is a copy of the image produced . c , . - u 4 , . t b , . - 

, t . & ... _ , /. processing is specified anew by a filter, the input data of 

by the percon claiming compet.sat.oa. I. would be very ^ ^ * ^ y redetermined da P ta rts of 

important for the producer that even after the transfer and , . . . , r 

... . , , , ... „ , the electric signal, 

possible processing measures it would be possible to find _ . . , 

some information indicative of the origin of the image from 35 u The invention also relates to a device for implementing 

the file transferred in electric form. However, this informa- ! he me,hod desenbed above. The device according to the 

tion must be so hidden that a dishonest user cannot remove invention » characterized in that it comprises a filter, and the 

it or even perceive its existence. processing unit of the device is arranged to re-determine the 

, , , , .... c . „, , value of the data parts selected for processing in a manner 

Methods used to mdicate ownership of image files can be s j^ggj ^ t [j e git er 

divided into two main categories. In watermark methods, a 40 _ . , - ! . . r „ 

graphic element is added to the image, which element can be r For ,he » ke of c ^ th _ e foDowmg description will 

isolated afterwards and shown as a graphic evidence to focus ° n the c * am P le ,n whlcb ' he ""S™ 1 s, 8 nal ls . a 

prove that it has been added to the image on purpose, and two-dimensional still image and the signature is a certain 

that it is not a random combination of partsof the image. In g ra P hlc element ' l ° the m / th °f "»»*«« to the mvention, 

\ checksum methods, a checksum or a logical combination is 45 the signature is thus preferably a two-dunensional binary 

calculated by a secret method from the bits and/or bytes used ' consis ting of bits wh.ch have a value of either 1 or 0. 

to present the image, and this combination is added to the Shown as a bit map, a s.gnature of tins kind is a two-color 

image file as part of it. The origin of the image is detected ™age (typically black and white), in which the bits with the 

by calculating the same logical combination afterwards and * alue \ iK showD 85 black P 15tel ! and . lhe blts Wllh th ,f value 

comparing it to the original checksum contained by the file. 50 °» ? hltt . P ix ° ls or Vlce versa -, ^ s !8 na l" re 15 * l ° n <°P 

Because only the real owner of the image knows the correct ° t r ll ? e °ngt"al image as a mask at a desired point, and only 

calculation method for the checksum, the probability of th ? P'«ls which coincide with the 1 -bits of the signature are 

getting the same sum with a method chosen at random is ^ lected from ^ °nginal image for processing. A natural, 

sma jj alternative method is to select for processing only the pixels 

All the above mentioned methods have the following com- 55 whic * ^ inc i de f ^ ^ °: bi * ™ ^ e signature. A new value 

mon objectives- 15 calcuIated for eacn P™ 1 of lDC original image being 

r . . ^ r processed with a filter, the input data of which consist of 

the visual quality of the image must not suffer from the certain ^ of the Qri inal { which do nQt ^ tQ 

addition of the authentication code to the image, the pixels ^ proce ssed. When a new value has been 

only the producer and possibly an independent, reliable 60 specified for all pixels being processed, the authentication 

testing institution can check the authentication code coding has been completed. 

hidden in an image, ^ whicfa is used tQ ca]culate new values for the 

the authentication method must allow the use of many pixels of the original image selected for processing, can be 

kinds of authentication codes or "signatures", chosen rather freely. A filter which is advantageous with 

the authentication code must remain in the image with a 65 regard to the invention is such that with great likelihood it 

sufficient reliability, even if the image is packed with will alter the value of any randomly selected pixel, but the 

the JPEG or MPEG algorithm, for example, and alteration is small. Filtering can be defined extensively as 
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any operation in which the new value of a certain pixel or signature in the image. The location is preferably indicated 

other data part is specified deterministically on the basis of as the coordinates of the pixel on which the pixel number 

the values of pixels or other data parts which are used as (1,1) of the signature hits. Let us assume that the person who 

input data for the filter. is carrying out the coding selects the location (3,3). In the 

In order to perceive the authentication coding according s example of the figure the pixels of the original image on 

. . .u *• *u *• j i • - which the 1-pixels of the signature hit are selected for 

to the invention, the entire authentication coded image is T v Tr , A . & , r . . , . 

... . processing. In FIG. 1. these pixels of the original image are 

filtered pixel by pixel with the same filter which was used to r . , 

marked witn x 

implement the authentication coding. Because the filter is _ , . , * , . . . - , * r • 

very likely to change the value of any pixel being processed, Each P ixel of lh ° ongmal image selected for processing is 

most of the values of the pixels in the image are changed. M P««*sed separately by a filter the detailed implementation 

Only the pixels which had their value changed according to of w ^ ich «" be freel y chosen £ the *™. who 15 ca ^ m 8 

the filter already in the authentication coding, remain out the authenticaUon codmg. The only hmitation set by the 

unchanged. The observer marks those pixels in the image m y enl, ° n fo ' lhe . filter " 11 musl ™ l ^ of f the 

which have not changed. If these pixels form the graphic *? ected P"els as input data. Thus the implementaUon of the 

element used as a signature, the copyright of the image has « After is somewhat dependent on how the pixels 1 and 0 are 

, divided in the signature. From FIG. 1 it can be seen that the 

been proven. . . . , . .. 

. . ,.„ . , , . signature used as aD example does not contain adjacent or 

In various modifications of the invention, the original diagonall y adjacem j.^ and thus , he filler can use as input 

image can be processed in many ways before the signature data fof , he fiUeri of a cer , ain ^ ^ uc d h , ^ 

is added to it. One advantageous method is to use a known surrounding the pixel t0 te ffltoredf for example. FIG. 2 

transformation, the reverse transformation of which is shows a dj of a flUer m whicb , he fi , tered va , ue of me 

known, to process the original image. The signature is added M x mafked with dj a l Unes 

is the same as the mean 

to the transformed image with the filtering method described va)ue of aU me ^ ixels surrounding it . fiUer is very 

above, and the image thus received is reversely transformed suitaWe fof a case ^ , he 0Qe showQ m FIG L 

back to the origmal form. The signature can also be over- „ t , • • , • ■ . • « u ♦ u * 

. , . r & . . . . ii_ -i . c i 25 Because the origmal lm age is typically a photograph-type 

sampled before it is added to the original or transformed . u u j- * • i 1^1* 

r . .. . 4 l • . ■ j i- image, m which many adjacent pixels are very unlikely to 

image, which in practice means that the signature is duph- , 0 t . tl _ 1 • 1 • « /• 

. j 1 ij 1 * 1 , • r have exactly the same value, it is almost certain that a filter 

cated and added at several positions on the same image. A , J , . ™^ \ .„ , t , , - 

r to like the one shown in FIG. 2 will change the value of the 

BRIEF DESCRIPTION OF THE DRAWINGS P^ 1 selected. On the other hand, radical changes of the 

30 pixel value on a length of a few pixels are rare, and so the 

In the following, the invention will be described in more filter shown in FIG. 2 is likely to change the value of the 

detail with reference to the preferred embodiments presented pixel 0 nly a little. Both of these are advantageous features 

by way of example and the accompanying drawings, in with regard to authentication coding. When all the pixels of 

which the original image selected for processing on the basis of the 

FIG. 1 shows the selection of the pixels according to the 35 signature have been separately filtered with the chosen filter, 

invention, the authentication coding according to the simple embodi- 

FIG. 2 shows a filter according to the invention, meDt of the invention has been completed. If any of the 

ii_ >■ j * r *l j • pixels selected for processing had been situated very near 

FIG. 3 shows the detection of the authentication coding f L , - . . r , & . , , .. J . 

accordin to the invention ^ e image, the window 200 depicting the 

f * 40 selection of the input data had been located partly outside the 

FIG. 4 shows the proceeding of an embodiment of the For cases ^ mifi {t fe possible to define a ^ caUed 

invention, and wrap-around protocol, according to which transition from 

FIG. 5 shows a device according to one embodiment of the pixel at the edge of the image to the area outside the 

the invention. image is interpreted as transition to a pixel at the opposite 

45 edge of the image (in other words, the location of the pixels 
in the columns is defined as modulo the number of columns 
and similarly in the rows modulo the number of rows). 

FIG. 1 shows a simple digital image 100, but for the sake FIG. 3 shows the detection of authentication coding in an 

of clarity, the color of its pixels is not shown in FIG. 1, and image which has been authenticaUon coded by a method 

a simple binary signature 101, in which the 1 -pixels are 50 according to the simple embodiment of the invention 

shown black and the 0-pixels white. The digital image 100 described above. The digital image 300 is filtered pixel by 

has MxN pixels, which are divided into numbered columns pixel with the same filter which was used to hide the 

and lines (here M=12 and N=15). The value of each pixel is signature in the original image. The frame 301 depicts the 

generally an 8-bit byte or a 16-bit pair of bytes. A real digital location of the selection frame of the filler input data at a 

image to be authentication coded typically has hundreds of 55 certain pixel, and the arrows proceeding pixel by pixel 

thousands or millions of pixels. A real signature is generally describe the moving of the frame pixel by pixel forward, 

also much larger and more complicated than the example in until the whole image has been filtered. The value of most 

FIG. 1. The size of the signature is generally HxK pixels pixels will change in the filtering, as has been stated above, 

(here H«5 and K=7). So as to make the signature fit into the However, the value of those pixels which have already been 

image in its entirety, its size can be limited as H<M and 60 filtered when the signature was hidden, does not change, 

K<N. because filtering on the basis of the same input data pixels 

In authentication coding according to the simple embodi- gives the same result both during the hiding and discovery 

ment of the invention, the person who is carrying out the of the signature. In addition, it can be assumed that there are 

coding selects from the original image 100 a location in some pixels in the image which happen to have such a value 

which the signature 101 is to be placed. It is advantageous 65 that it does not change during the filtering. On the basis of 

to have the location selected freely, because then the poten- the filtering results, a so called detection image is formed, in 

tial image pirate will not know where to look for the which the pixels which remained unchanged in the filtering 
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are clearly distinguished from those which had their value 
changed. In FIG. 3, for example, the first mentioned pixels 
are shown black and all other pixels white. The pixels at the 
points (2,1) and (1,N) of the image are randomly found 
pixels and other pixels marked black belong to the signature. 5 

If the signature is a certain regular and easily recognizable 
graphic element and if there is a relatively small amount of 
randomly found "non-changing" pixels, the signature can 
generally be clearly seen with the naked eye in the detection 
image, when the whole image has been filtered If one of 10 
these conditions is not met, the signature can be searched by 
statistical methods from the detection image. In practice, this 
is generally most easily implemented by forming a convo- 
lution of the signature and the detection image, in which the 
known signature is compared to each of its possible loca- 15 
tions on the detection image, and a characteristic is calcu- 
lated to describe how well the pixel content of the signature 
corresponds to the pixel content of the detection image in 
each possible location. If the highest value of the convolu- 
tion shows that at the most suitable location over 90% of the 2 o 
pixels have the same value as the corresponding pixels of the 
detection image, it is relatively certain that the signature has 
originally been placed at the location in question. It is not 
possible to demand that the signature and the suspected 
location on the detection image are fully identical, if there is 2 s 
the possibility that a packing algorithm or some other factor 
causing loss of information has changed the contents of the 
image after the authentication coding. 

In the simple embodiment of the invention described 
above the person who performs the coding can choose the 30 
signature, its location on the original image and the filter by 
which both the authentication coding and its detection is 
performed. Because the number of possible signatures is 
almost limitless when large images are processed and 
because there are many possible filters, without knowledge 35 
of the form of the signature and the filter used it is difficult 
even to know whether a certain image has been authentica- 
tion coded or not, and to discover and remove the signature 
used in the coding is even more difficult. However, it is 
possible to think of a situation in which an image pirate gets 40 
hold of both the original, uncoded image and its authenti- 
cation coded version. If the difference of these images is 
calculated by pixels, the signature becomes visible, because 
the authentication coding has only changed the value of the 
pixels selected on the basis of the signature, while other 45 
pixels have remained unchanged. When the signature has 
been found, the image pirate can perform a statistical 
analysis of how the values of the original image have been 
changed in the authentication coding, in which case it may 
even be possible to find out what kind of a filter was used in 50 
the coding. On the basis of this information, it is also 
possible to try to break the authentication coding of other 
images produced by the same producer. 

In order to eliminate this disadvantage, another embodi- 
ment of the invention has been developed, and it will be 55 
described in the following with reference to FIG. 4. At the 
beginning of the coding, the original image 400 is trans- 
formed into another form 401 by the transformation T, the 
reverse transformation T^ 1 of which is known by the person 
who performs the authentication coding. The signature 402 60 
is added to the transformed image by using the filter 403 in 
the same way as has been described above. The transformed 
image, to which the signature has been added by filtering, is 
reversely transformed into the image 404, which otherwise 
corresponds to the original image 400 but in addition 65 
contains the signature in a form which is the result of the 
filtering 403 and the reverse transformation T" 1 . When 
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observed with the naked eye, it is usually impossible to 
distinguish the image 404 from the original image 400. 

In order to detect the authentication coding, the image 404 
is again transformed with the transformation T, resulting in 
the image 405. When it is filtered pixel by pixel with the 
filter 403, and all the pixels with an unchanged value are 
marked, the result is the detection image 406, from which it 
is further possible either to visually perceive or by statistical 
methods to discover the signature 402. 

The transformation T can be freely chosen by the person 
who performs the authentication coding, as long as it is 
deterministic and its reverse transformation T 1 is known. In 
this embodiment the person performing the authentication 
coding can use, in addition to the signature, its location and 
the filter mentioned above, a fourth factor which can be 
freely chosen and which makes an unauthorized detection of 
the signature and thereby the possibility of breaking the 
authentication code even more difficult. One known trans- 
formation T, which can be used as shown in FIG. 4, is a 
discrete cosine transformation. Another possible transfor- 
mation is the division of the image (virtually randomly, for 
example) into two or more partial images, whereby the 
signature is added to only one of them or in which partial 
images the signature is added to different locations. The 
division of the image into partial images can take place by 
"cutting" part of the pixels to different partial images or by 
dividing the value of each pixel into parts (for example, the 
four most significant bits of each pixel into the first partial 
image and the rest of the bits into the second partial image) 
or in other ways. Aperson skilled in the art can easily present 
many suitable transformations. There are many algorithms 
and electric circuits on the market, by which various trans- 
formations and reverse transformations can be quickly and 
easily calculated for the images, and thus the more advanced 
embodiment of the invention does not make the implemen- 
tation of the invention substantially more complicated. 

One variation, which makes the authentication coding 
according to the invention more resistive against the disap- 
pearance of information caused by the packing algorithms of 
the image files, is oversampling of the signature before it is 
added by filtering to the original image or the transformed 
image obtained by transformation. Oversampling means 
increasing the pixel division of the signature. If a two- 
dimensional signature is double oversampled both vertically 
and horizontally, each original pixel of the signature become 
four pixels with equal value. In other words, the original 
signature is duplicated into four copies, which are placed on 
the image to be authentication coded regularly in relation to 
one another or even independent of one another. Thus the 
likelihood that at least one copy of the signature becomes 
clearly visible when the authentication coding is to be 
detected, is very high. The rate of oversampling can be 
freely chosen by the person performing the authentication 
coding. If several copies of the signature are added to the 
same image, different filters can be used to add each copy. 
Then the copy of each signature can naturally be detected 
only by using the same filter that was used to add it to the 
image. When several copies are being added to the image, 
attention must be paid to avoid overlapping. 

An important place of application for authentication cod- 
ing of two-dimensional images is in digital image archives, 
which are connected to Internet or such another general data 
transfer network, and from which the users can select and 
copy any image files they want. The keeper of the image 
archive can protect the images in the archive by authenti- 
cation coding according to the invention and, for example, 
send a program called "agent" to the data network to search 
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automatically for other image files and test if ao authenti- processor 500, which is equipped to read and write images 
cation coding made by the keeper of the image archive can or other signals from the storage blocks 501 and 502 and to 
be found in them. If a signature is found in an image file carry out the signal processing operations required by the 
which has not been legally acquired by a legal agreement invention. The microprocessor also has a two-way data 
from the keeper of the image archive, it proves that the 5 transfer connection to the storage blocks 503, 504 and 505, 
holder of the file has acquired the possession of it without the first of which is intended for saving the filter used in the 
permission. A single image on a www home page can also filtering, the second is intended for saving the data used as 
be authentication coded so that its unauthorized copying to a signature, and the third is intended for saving the trans- 
other places in the data network could be detected. A formation T and its reverse transformation. A display unit 
browser program, which the legal owner of an authentica- JQ 506 has also been connected to the microprocessor for 
lion coded image or images uses to get other information conveying information to the user, and a keyboard 507, by 
from the data network, can be equipped with an authenti- which the user can control the operation of the device. It this 
cation coding detection part, to which the user inputs in for- were a sealed authentication coding circuit, the purpose of 
mation of the signature, filter and possible transformation which is to operate in a certain larger device, certifying the 
used. Thus the owner of a certain image or images can — origin of the information produced by the device, the key- 
when finding a familiar image in the network — by pressing 15 board and display would not be needed, and the information 
a key or clicking the mouse examine if it_ contains the of the filter, signature and transformation would be saved 
owner's signature. permanently in the storage blocks 503, 504 and 505. In this 
The above description concerned the application of the connection, sealing means any known arrangement by 
invention to the authentication coding of two-dimensional which the contents and operation of a certain electric circuit 
digital images shown in bit -map form. However, the inven- 20 is protected so as to make unauthorized detection thereof 
tion can be extended to the processing of many types of difficult. 

electric signals. A video performance is a series of two- The user inputs to a device according to FIG. 5 the 

dimensional images shown rapidly in succession, and any information of the filter, signature and transformation 

one of them, or each of them, can be supplied with a wanted by using the keyboard 507 or a corresponding data 

signature as described above. On the other hand, a video 25 input device. In addition, the user enters a command, which 

performance can utilize the time dimension by making the means the authentication coding of an image file or another 

filter used for authentication coding and its detection three- file. The file in question is then saved in the storage block 

dimensional, whereby it uses certain pixels contained by two 501. The microprocessor 500 reads the file to be authenti- 

or more consecutive images, for example, as input data. The cation coded, transforms it according to the transformation 

signal to be authentication coded and the signature and filter 30 T read from the storage block 505 and saves it in the storage 

used in the authentication coding can also be one- block 502. It is thus advantageous to have two separate 

dimensional: for example, a digital telephone signal, which storage blocks 501 and 502, because if the transformation is 

is a series of temporally consecutive bytes. In this case, the interrupted or an error occurs during the process, the entire 

signature can be a certain line of bits, of which the bytes file is not destroyed but its original version remains saved in 

corresponding to 1-bits (alternatively 0-bits) from a certain, 35 the storage block 501. Next, the microprocessor 500 reads 

regularly repeating sequence of telephone signal (for the transformed file from the storage block 502 and saves it 

example, a speech frame corresponding to 20 ms of speech back to the storage block 501 so that it changes the values 

time) are selected for processing. The term "data part" of the pixels or other data parts in a manner determined by 

mentioned above in connection with the general description the filter read from the storage block 503. Finally, the 

of the invention means all the parts of the signal shown in 40 microprocessor reads the file again from the storage block 

electric form which can be identified and selected for 501, reversely transforms it and saves the authentication 

processing as described above and the value of which can be coded file in the storage block 502. The microprocessor 

changed by means of a certain filter. informs the user of a successful completion of the authen- 

The authentication coding of audio and video signals or tication coding via the display 506. 

other temporally continuous signals, in particular, shows 45 When the user uses the keyboard to enter a command 507, 

that the signal need not be a certain file with limited size, as meaning the detection of the authentication coding from the 

in the authentication coding of still images. By the method file saved in the storage block 502, the microprocessor reads 

according to the invention, the authentication coding can be the file, transforms it and saves the transformed file in the 

added to a temporally continuous signal at certain regular or storage block 501. In the next step, it reads the transformed 

irregular intervals. This property of the invention can be 50 file from the storage block 501, filters it and forms a 

utilized for identifying an electric signal produced by a detection file in which the data parts which had their value 

certain device (telephone, video camera, tape recorder etc.): unchanged during filtering, are marked. The detection file is 

the device can contain a scaled authentication coding circuit, saved in the storage block 502. The microprocessor forms a 

to which a certain signature, a certain filter and when convolution of the detection file and signature, and saves the 

required, a certain transformation and its reverse 55 result in the storage block 501, in which result each data part 

transformation, characteristic of this device, have been per- of the detection file corresponds to an identification number, 

manently saved. At regular or irregular intervals, the authen- which depicts the suitability of the signature to the data part 

tication coding circuit separates a cycle from the sequence of the detection file. Finally, the microprocessor informs the 

generated by the device, to which sequence it hides the user by the display 506 which the largest number is, where 

signature in a manner according to the invention. 60 it is located and if, judging from it, it is likely that the file 

Afterwards, the signal generated by the device can be sent has been found to be authentication coded, using the signa- 

to be analyzed by such a trusted person or persons who know ture saved in the storage block 504. The microprocessor can 

the information saved in the sealed authentication coding also show the detection file graphically to the user on the 

circuit. By means of this information, the trusted person can display 506, whereby the user can visually determine 

prove which device was used to produce the signal. 65 whether the signature has been found in the file. 

FIG. 5 shows a diagram of a device for implementing the It is clear to a person skilled in the art that the embodi- 

method according to the invention. The device has a micro- ments of the invention described above are presented by way 
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of example only, and that it is possible to make obvious 
changes to them without departing from the scope defined 
by the claims presented hereinafter. 
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What is claimed is: 55 

I. A method for hiding an authentication code (101, 402, 
504) in an electric signal (100, 400, 401) representing pixel 
values, wherein the pixel values are selected from the 
electric signal for processing on the basis of the contents of 
the authentication code, characterized in that the value of 60 
each pixel value selected for processing is re-determined by 

a filter (200, 403, 503), which uses as filter input only pixel 
values of the electric signal from predetermined pixels. 

2. A method according to claim 1, characterized in that 
said electric signal (100, 400, 401) is a file and its pixel 65 
values are bytes. 



3. A method according to claim 2, characterized in that 
said file is an image file. 

4. A method according to claim 1, characterized in that 
said electric signal (100, 400, 401) is a temporally continu- 
ous signal and its pixel values are bytes, whereby a certain 
temporal period is separated from the temporally continuous 
signal and the authentication code is hidden in said separated 
signal period. 

5. A method according to claim 4, characterized in that the 
authentication code is repeatedly hidden in the same tem- 
porally continuous signal. 

6. A method according to claim 1, characterized in that a 
deterministic transformation (T, 505) is also carried out on 
said electric signal before the pixel values are selected for 
processing, and a reverse transformation (T -1 , 505) of said 
deterministic transformation- is carried out on the trans- 
formed electric signal after the value of each pixel value 
selected for processing has been specified anew. 

7. A method for detecting the authentication coding from 
an electric signal representing pixel values, characterized in 
that in it 

the electric signal is filtered with a predetermined filter 
(403), 

the pixel values (406) which have their value unchanged 

during filtering are marked, and 
the marked pixel values are compared to a predetermined 

signature (402). 

8. A method according to claim 7, characterized in that a 
predetermined deterministic transformation (T) is also car- 
ried out on said electric signal before it is filtered. 

9. A device for hiding the authentication code in an 
electric signal representing pixel values, wherein said device 
comprises a memory (501, 502) for saving said electric 
signal, and a processing unit (500) for reading the electric 
signal from the memory and for selecting certain pixel 
values for the electric signal for processing on the basis of 
the authentication code, characterized in that it comprises a 
filter (503), and said processing unit is arranged to 
re-determine the value of each pixel value selected for 
processing in a manner specified by said filter. 

10. A device for detecting the authentication coding from 
an electric signal representing pixel values, wherein said 
device comprises a memory (501, 502) for saving the 
electric signal and a processing unit (500) for reading the 
electric signal from the memory and for changing the value 
of its pixel values, characterized in that it comprises a filter 
(503), and said processing unit is arranged to re-determine 
the value of the pixel values of the signal in a manner 
specified by said filter and to save the information of those 
pixel values which have their value unchanged during 
filtering. 

11. A device according to claim 10, characterized in that 
it also comprises an input device (507) for receiving the 
input data from the user and an output device (506) for 
conveying information about the operation to the user. 

12. A device according to claim 10, characterized in that 
it is a sealed authentication coding circuit. 

13. A device according to claim 9, characterized in that it 
also comprises an input device (507) for receiving the input 
data from the user and an output device (506) for conveying 
information about the operation to the user. 

14. A device according to claim 9, characterized in that it 
is a sealed authentication coding circuit. 
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